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EXPLICIT ISOGENY DESCENT ON ELLIPTIC CURVES 



ROBERT L. MILLER AND MICHAEL STOLL 



Abstract. In this note, we consider an ^-isogeny descent on a pair of elliptic 
curves over Q. We assume that I > 3 is a prime. The main result expresses 
the relevant Selmer groups as kernels of simple explicit maps between finite- 
dimensional F^-vector spaces defined in terms of the splitting fields of the 
kernels of the two isogenies. We give examples of proving the £-part of the 
Birch and Swinnerton-Dyer conjectural formula for certain curves of small 
conductor. 



1. Introduction 

Let E/Q be an elliptic curve. Then it is known [24] that the group E(Q) of ra- 
tional points on E is a finitely generated abclian group. Its finite torsion subgroup 
is easily determined, but so far there is no method known that can provably deter- 
mine the rank r of E(Q) for an arbitrary given curve E. There is another abelian 
group associated to E/Q, the Shafarevich-Tate group ffl(Q, E). It is conjectured 
to be finite for all elliptic curves; however, this is only known for curves of analytic 
rank or 1. 

The analytic rank is the order of vanishing of the L-series L(E, s) associated to E 
at the point s = 1. The conjecture of Birch and Swinnerton-Dyer states that the 
analytic rank equals the rank, and moreover gives a relation between the leading 
term of the Taylor expansion of L(E, s) at s = 1 and various local and global data 
associated to E, including the order of UI(Q,E). Kolyvagin [20] has shown that 
the first part of the conjecture holds when the analytic rank is at most 1, that in 
this case UI(Q,E) is finite, and the second part of the conjecture holds up to a 
rational factor involving only primes in a certain finite set (depending on E). 

The two groups E(Q) and HI(Q, E) are related by objects that can (in principle) 
be computed: for each I > 1, there is a finite computable group Ser^(Q, E), the 
l-Selmer group of E, and an exact sequence of abelian groups 



— > E(Q)/£E(Q) — > Sel w (Q,£) — > UI(Q,E)[£] — >0. 

If £ is a prime number, then all groups involved are F^-vector spaces, and we obtain 
the relation 



dim F , SelW(Q, E) = r + dim ¥e E(Q)[£] + dim Ff LU(Q, E)[£] . 

This can be used to obtain upper bounds for r on the one hand, but also leads to 
information on LU(Q,i?) when r is known (for example when the analytic rank is 
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at most 1). In particular, if 



dim Ff Sel W (Q, E) = r + dim ¥e E(Q)[£ 



then it follows that the ^-primary part of III(Q, E) is trivial. The computation of 
the ^-Selmer group is referred to as an i-descent on E. How this can be done is 
discussed in some detail in [31]. The computation involves obtaining information 
on class groups and unit groups in number fields of degree up to £ 2 — 1, so this often 
will be infeasible when £ > 5. Even when there is a rational £- isogeny <j> : E — > E', 
one usually has to deal with a field of degree £ 2 — £. In this case, an alternative 
approach is to compute Selmer groups associated to <fi and the dual isogeny </>'. The 
information obtained still provides upper bounds for the rank r and the f-torsion 
of IH(Q, E) (and IH(Q, E')), but the latter may fail to be sharp. 

There is already a considerable amount of work in the literature in specific cases. 
In the following, we try to give an overview, which we do not claim to be exhaustive. 
Cremona uses 2-isogeny descents in [B] for a large number of curves, to determine the 
ranks of the Mordell-Weil groups E(Q). In addition, online notes [8] describe how 
to extend these descents to full 2-descents, in cases where the information gained 
is inconclusive. Frey [19] uses 2-isogeny descent for curves of the form y 2 — x 3 ± p 3 
for primes p > 3 to determine their ranks in terms of congruence conditions on p. 
The general theory of 2-isogeny descents is presented in detail in [311 Chapter X] . 

Selmer [32] [33] and later Cassels [4] studied cubic twists of the cubic Fermat 
curve and considered among other things 3-isogenies and the multiplication by 



y— 3 map for these curves. Satge [28] considers the 3-isogeny from the curve given 

by y 2 = x 3 + A to its twist y 2 — x 3 — 27 A, for arbitrary A. He determines the 
Selmer group of this isogeny over Q by identifying it with a certain subgroup of 
Hom(Gw^A , Z/3Z). Jeechul Woo in his Ph.D. thesis [35] works out the theory 
and formulae for 3-isogeny descent in the presence of a rational 3-torsion point. 
Nekovaf considers quadratic twists of the Fermat curve in [25] and computes the 
Selmer groups of rational 3-isogenies. Quer [27] uses the connection between 3- 
isogeny Selmer groups and class groups of quadratic fields to exhibit quadratic 
imaginary fields of 3-rank 6, based on elliptic curves of the form y 2 = x 3 + k 
with rank 12. Top [36 j demonstrates that the technique Quer uses applies to any 
elliptic curve admitting a rational 3-isogeny. DeLong [11 finds a formula for the 
dimension of the Selmer groups of these 3-isogenies which also relates the 3-ranks 
of the associated quadratic fields. Elkies and Rogers [14] use explicit formulas for 
3-isogeny descents to construct elliptic curves of the form x 3 + y 3 = k oi ranks 8 
through 11 over Q. 

Flynn and Grattoni [17] consider isogenies coming from rational points of prime 
power order and exhibit an element of the Shafarevich-Tate group of order 13. 
Their PARI programs are available at [18]. 

Beaver computes Selmer groups for isogenies of degree 5 in pQ and uses an explicit 
formula for the Cassels- Tate pairing to find nontrivial elements of the Shafarevich- 
Tate group of order 5. Fisher gives general results regarding descents over rational 
isogenies of degree £ = 5 and £ = 7 when one of the curves has a rational f-torsion 
point in [T5j [16] , which also include tables of many specific cases. 

Cremona, Fisher, O'Neil, Simon and Stoll [9] work out the general theory for full 
n-descents. Schaefer relates in [29] Selmer groups for isogenies of abelian varieties 
over number fields to class groups. In [30] he realizes the connecting homomorphism 
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in Galois cohomology as evaluation of a certain function called the descent map (see 
Section [2] below) on divisors. With Stoll he explains in [31] how to do a descent for 
any isogeny of odd prime power degree £ e . One important result, which is also used 
here, is that the set of bad primes can be reduced to those above £ and those with 
the property that one of the corresponding Tamagawa numbers is divisible by I. 

In this note, we will expand on |31j and show how such an ^-isogeny descent 
can be performed with only little explicit computation. Our main result is given in 
Theorem 17.11 It expresses the relevant Selmer groups as kernels of simple explicit 
maps between finite-dimensional vector spaces. The maps and spaces are defined 
in terms of the splitting fields of the kernels of the two isogenies involved. See 
Section [3] below for an explanation of the underlying idea. Our result makes the 
computation of the Selmer group sizes very easy and straight-forward. This can be 
used to obtain bounds on the rank and/or the size of the ^-torsion subgroup of the 
Shafarevich-Tate groups of the two curves involved. The result takes a particularly 
simple form when the kernel of 4> is generated by a rational point, see Corollarv l8.1[ 
which reproduces one of the main results of Fisher's thesis 15 . 

We have used the results to finish off the verification of the full Birch and 
Swinnerton-Dyer conjecture for a number of elliptic curves of conductor up to 5000. 
For a more precise statement of this result, see Theorem 19. II 

We thank the anonymous referees for some useful comments. 

2. Generalities 

Let I > 3 be a prime, and let E be an elliptic curve over Q such that E has a 
rational I- isogeny. By Mazur's famous result [3T], this implies that 

I e {5, 7, 11, 13, 17, 19, 37, 43, 67, 163} . 

We remark that everything we do in this paper still works for £ — 3, under the 
condition that E and E' have no special fibers of type IV or IV* . For simplicity, we 
do not discuss this case in more detail. Note that a full 3-descent as described in [9] 
is usually feasible (and an implementation is available in MAGMA, for example), so 
for practical purposes, it is of particular interest to be able to deal with the case 
£> 3. 

Let 4> '■ E — > E' be the isogeny, and let <j)' : E' — > E be the dual isogeny. Velu [37] 
gives explicit formulae for and E' in terms of E. (Note that the model given for 
E' may not be minimal.) Our reference for the following will be [3"T] . 

We have an exact sequence of Galois modules 

(2.1) — > E' [</>'] — ^ E' -A E — > 0. 

The ft-Selmer group Sel (<//) (Q, E') sits in the Galois cohomology group H 1 (Q, E'[(j>']); 
it is defined to be the kernel of the diagonal map in the following diagram whose 
(exact) rows are obtained by taking Galois cohomology of (|2.ip over Q and over all 
completions Q v , respectively. 

E(Q) H 1 (Q,E' [()>']) H^Q,^) 



0, E(Q V ) IL H\Q V ,E'W}) IL H 1 (Q V ,E') 
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The Shafarevich-Tate group III(Q, E') is the kernel of the right-most vertical map 
in the diagram. This leads to the exact sequence 

— ► E(Q)/<P'(E'(Q)) A Sel^i®, E') — ► LH(Q, — ► . 

By the usual yoga (see [31] p. 1222]), we find that 

H\<Qi,Ey])^ {K* /{K*) l ) {1) , 

where K is the field of definition of any nontrivial point P in the kernel E[<f)], and 
the superscript (1) denotes the subgroup on which the automorphism induced by 
P H> aP acts as z i — y z a (for a € such that aP is in the same Galois orbit as P). 
If S is a finite set of primes, we defintQ 

K(S,£) — {a(K x ) t : £ \ v p (a) for all primes p of K not above some p e S} 

K x 

c (K*y' 

Then the image of the Selmer group is contained in K(S,£)^ if S contains £ and 
the primes p such that £ divides one of the Tamagawa numbers c p {E) or c p (E') 
(see [31j Prop. 3.2]). Note that if E(Q)[<j>] ^ 0, then we have that K = Q and 
K(S,£)M=Q(S,£). 

We fix our notations by requiring that E[cf>] C i?(R) and E'[<p'\ n £"(R) = 0. 
This puts a definite order on the pair (E,E'). 

Let F £ K(E) be the descent map, i.e., F has a zero of order £ at P and a pole 
of order £ at the origin O oi E, and is normalized such that in terms of the local 
parameter t = y/x at O (we fix a globally minimal Weierstrass equation for E), we 
have 

F(t)=t- e (l + tf(t)), 

for some power series f(t) over K . Then the connecting homomorphism <5 in the 
sequence above can be identified with 

F:E{Q)^K(S,£)W, 

where we set F{0) = 1 and F(P) = l/F(-P) (if P e E(Q)). We let K p = K® Q Q p , 
then there is a canonical homomorphism r p : K x / (K X Y —> K X /(K X ) 1 . The 
function F induces a map F p : E(Q p ) -> K x f(K£) e , 
We then have 

(2.2) Se\^'\Q,E>) = e K(S,£)^ : r p (£) e F P (£(Q P )) for all P eS} 

as a subgroup of K(S, ip 1 ', where S is as before. 

In the following, we want to make the expression on the right hand side of 
Equation (12.21) as explicit as possible. 



There is a variant of this definition that requires K(^fa)/ K to be unramified outside primes 
above primes in S. This does not make a difference when i £ S. For our purposes, the definition 
given here is more convenient. Note that it will be used later with sets S possibly not containing t. 
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3. The basic idea 
We begin with a definition that is needed below. 
Definition 3.1. For S a finite set of primes and K a number field, let 

peS \ U K,p) 

where Ok, p = Ok ®i 7L> p is the p-adic completion of the ring of integers of K. If S 
and S' are finite disjoint sets of primes, then there is an obvious canonical map 

K(S,£) — -> K{S',l)* . 

(Note that for p ^ S, an element of K(S, £) always has a representative that is a 
p-adic unit.) 

Let S be the set of primes p such that £ divides one of the Tamagawa numbers 
c p (E) or Cp(E'), together with the prime £. According to equation (|2.2[) above, we 
need to find the subgroup of K (S, £)^ consisting of elements satisfying certain local 
conditions at the primes p £ S. This will be made fairly easy if these local conditions 
are of a simple nature. The simplest possible cases certainly occur when the 'local 
image' F p (E(Q p )) is either trivial or the full local group H p = (K^ / (K^)) (1) . 
Another easy situation is when the local image is exactly the part U p of the local 
group that comes from p-adic units, since in that case, we can just drop p from 5*. 

Lemma 3.2. We now assume that for each p 6 S, we are in one of the three cases 
mentioned above, and we set 

S± = {p £ S : F p (E{Q p )) = H p } and S 2 = { P £ S : F P (E(Q P )) = 0} . 

Then 

Sel (0,) (Q,£') = ker(a : K{S u l) {1) -> K (&,£)*) . 
Here a is the canonical map from Definition \3.1{ 

Proof. First we show that the Selmer group is contained in K(Si,£)W. This means 
that for all p € S\Si, the local image is contained in U p . But for all these primes, 
we have by assumption that the image is either trivial or equals U p , so the condition 
is satisfied. 

Now we check that the elements in the kernel of a are exactly those that satisfy 
the local conditions at allp £ S. If p £ S\(SiU S2), then the local image equals U p , 
and this condition is already taken care of since p (f. S\. If p £ S\ , then the local 
image is all of H p , and therefore there is no condition. Finally, if p £ S2, then the 
local image is trivial, which means that the Selmer group elements are represented 
by elements of K{S\,£) that are ^th powers in K p . Since p ^ Si, we can always 
find a representative that is a unit in K p ; then the condition says that the image 
in Kp /{0 Kp Y is trivial. Since 

(0 X 

K,P 



kera= f] kerf if (Si,£)^ 

p€.S 2 



(o x K , p Y 

the claim follows. □ 
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We denote by K' , F' , F', H', U' p etc. the objects corresponding to K, F, F p , 
Hp, Up etc. for the dual isogeny. Then it is a fact that there is a perfect pairing 

Hp x Hp > 4^- = ¥ e 

(induced by cup product and the Weil pairing on iJ^'s) such that the images of F p 
and Fp are exact annihilators of each other. (See [23j Cor. 1.2.3 and 1.3.4]; the 
last statement follows from the compatibility of the two pairings.) In particular, 
im(.Fp) ~ is equivalent to im(i^) = H' p , and im(.Fp) = H p is equivalent to 
im(Fp) = 0. In addition, we find that the ^-dimensions satisfy 

dim -Hp = dun Hp = dimim(i 7 p ) + dimim^p) . 

If p ^ £, then by Lemma 3.8 in we have 



4>'(E'(Q P )) v c p {E> 

and an analogous relation for tfi. If p = £, then the last expression has to be 
multiplied by t Vl ^ \ where ((/)')*(u)e) = Y^E' and uje, <^E' are the differentials 
associated to a minimal Weierstrass model. This prompts the following definition. 

Definition 3.3. We set w — 1^(7'). 

We define 7 by 4>*{uje') = 7^e, then 77' = £, and so we have 1^(7) = 1 — w. We 
obtain 



dimim(i^) + dimim(F^) = di mJ B(Q p )[0] + dim E'(Q P ) [</>'] 



ifp^e, 

1 itp = t. 



We will need to determine w. This is done in the following lemma. We denote 
by £l(E) = f E (j$\ \oJe\ the real period of E. Recall that we had fixed E to be the 
curve with E(R)[4>) ^ (and therefore, we have E'(R) [</>'] = 0). 

Lemma 3.4. We have Q(E)/fl(E') = i w . 

Proof. Since £"(R) [(/>'] = 0, <f/ is an isomorphism from E'(R) to E(M). Hence 
h'ME') = / | 7 W| = / M)*ue\ = I \u E \ = n(E) . 



We know that <fi*uiE' is an integral multiple of lue and that 4>'*uje is an integral 
multiple of uje'\ also (</>' o 4>)*u>e = £^e- Therefore, |7'| = 1 (and w — 0) or |7'| = I 
(and w = 1), and the claim follows. □ 

Since we can easily compute the real periods using a system like MAGMA, Sage 
or PARI-gp, w can be determined for any given isogeny. In some cases, the periods 
are computed with respect to the given model, so it is important to use globally 
minimal models of the two curves to get correct results. 

We will show below in Section [4] that when p £ S, but p^f, then we always have 
either trivial or full local image, and that the two cases are distinguished by looking 
at the quotient Cp(E)/c p (E'). The only possible problem can therefore occur when 
p = £. If I divides one of the Tamagawa numbers ci(E) or ce(E'), then the result 
is the same as for p ^ I. Otherwise, we see by the above that the following holds. 
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Lemma 3.5. Assume that l\ ci{E)ci{E'). 

(1) IfE'(Qe )W\ = 0andw = 0, then im(F t ) = and im(i^) = H' v 

(2) J/ £(Q*)[0] = and w = 1, i/ien im(i^) = and im(i^) = 0. 

Since Qg does not contain it is not possible that both E(Qe)[4>] and E'(Q()[(f>'] 
are nontrivial. The cases that are left are therefore 

• E'(Q e )W] + and w = and 

• E(Q e )[4>] ^ Q and w = 1. 

Then both local images at ^ are one-dimensional subspaces of the two-dimensional 
space Hi or H' e . It will turn out that im(Fg) = U[ in the first and im(i^) = Ui in 
the second of the two cases, see Lemma lOl below. So we will be able to compute at 
least one of the two Selmer groups Sel^ \Q, E') and Sel^(Q, E) easily. There is a 
formula due to Cassels that relates the sizes of these two groups, see Section[6]below. 
This allows us to deduce the size of the other Selmer group. Cassels' formula may 
also be useful when both Selmer groups can be computed by our methods, since 
one of the two number fields K and K' may be significantly easier to deal with (for 
example because it is of lower degree). We can then compute the easier group and 
deduce the size of the other one by Cassels' formula. 

4. Tate Curves 

We note that for all primes I ^ p € S,we have that £ divides c p (E) or c p (E'), and 
that our assumption that £ > 3 implies that if £ \ c p (E)c p (E') for any prime p, then 
both curves must have split multiplicative reduction at p. We can then use the Tate 
parametrization to obtain information on the images of F p and F^. This approach 
has also been used in some of the earlier papers mentioned in the introduction. 

Our reference for the following is [35l § V.3], in particular Theorem V.3.1. If an 
elliptic curve E has split multiplicative reduction at p, then there is q G with 
v(q) > such that E(Q p ) = Qp/g z . The subgroup of points with nonsingular 
reduction is E(Q p )° = Z£ , and the kernel of reduction is E^Qp) 1 = (1 + pZ p ). 
Therefore we find that 

EiQpf/EiQ,,) 1 = Z;/(l+pZ p ) = F p x 

(as must be the case for split multiplicative reduction) and that the component 
group is 

% = E(Q p )/E(Q p ) = Z/v p (q)Z 

where the isomorphism is induced by the valuation on Q x . In particular, the 
Tamagawa number is c p (E) = v p (q). This description of E(L) carries over to all 
finite extensions L of Q p . 

The ^-torsion subgroup of E is generated by \xg and qi, where q\ — q. So we have 
a point of order I in E(Q p ) if either /i^(Q p ) is nontrivial, which means p = 1 mod £, 
or if q is an £th power in Q p . In any case, the cyclic subgroups of order £ are \ig and 
the subgroups generated by some qe. The first kind of subgroup is always defined 
over Q p , the second kind only if qg € Q x . 

In the first case, the corresponding isogenous curve is E'(Q p ) = Q x / (o £ ) z , where 
the isogeny (f> is induced by z h- > z l . The dual isogeny </>' is induced by the identity 
map, which implies that E (Q p ) / 4>' (E' (Q p )) is trivial. Note that in this case we 
have c p (E') = v p (q e ) = £v p (q) = £c p (E). 
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In the second case, the corresponding isogenous curve is E'(Q P ) = Q* /qf, with 
isogeny <fi induced by the identity. The dual isogeny (j)' is induced by z H> so we 
have E(Q p )/<f/(E , (Q p )) = Q*/(Q P X ) £ , and c p {E) = tc p {E>). 

This leads to the following result. 

Lemma 4.1. Let p be a prime number. 

(1) Ifc p (E') = £cp(E), then im(F p ) = and im(i^) = H' p . 

(2) // c p (E) = lc p (E'), then im{F p ) = H p and im(F^) = 0. 
If £ 7^ P G S> then we are in one of these two cases. 

Proof. We have seen in the discussion above that if the curves E and E' have 
split multiplicative reduction at p, then we are in one of the two cases given in the 
statement. The claims on the local images follow from im(F p ) = E(Q p )/(f> / (E / (Q p )) 
and im(F^) = E' (Q p ) / 4>(E(Q P )) and the discussion preceding the statement of the 
lemma. If £ =/= p G S, then we must have split multiplicative reduction, therefore 
the first part applies. □ 

5. The local image at t 

As mentioned at the end of Section [31 the only cases that are left to consider are 
when I \ a(E)ce(E') and either 

E'(Q t )[<j/] i- and w = 0, or E(Qt)[</>] ^ and w = 1 . 

Note that the case I \ ce(E)ce(E') is taken care of by Lemma \A. II 
We now have the following result. 

Lemma 5.1. Assume that l\ ce(E)ce(E'). 

(1) If E' [Qt)[(j/] 7^ andw = 0, then im(i^) = U[ and Ui = H e . 

(2) IfE(Q e )[4>] ^ and w = 1, then im(i^) = U e and U' e = H' e . 

Proof. It suffices to prove the second assertion (say), the other one following by 
symmetry. We have E(Qg)[(j)] ^ 0, so the kernel is generated by some P G E(Qe), 
and Hi = /{Qg Y- Since £ does not divide cg(E), the point P must have nonsin- 
gular reduction. In terms of a minimal integral Weierstrass equation, the descent 
map is then given by a polynomial f[x) + g{x)y G Zz[x,y] (with deg/ < {£ — l)/2 
and g monic of degree {£ — 3)/2). It follows that Fi(Q) is a unit for all points 
Q G E(Qe) that do not reduce to the same point as the origin or P. For points 
in the same residue class as P, we use that F^{Q) = 1/Fg(—Q). For points in 
the kernel of reduction, we use that Ft(Q) = Fg(Q — P)/F^(—P). So we see that 
im(J^) C Ui. Since both sides are of dimension 1 (for im.(Fg) we use the assumption 
w = 1 here), they must be equal. The statement on U[ follows by inspection of 
H' e = (Qe(ti.e) x /{Qe{t l e) x y) t ' 1 \ which is generated by the images of the units £ and 
1 + X e , where £ is a primitive £th root of unity and A = 1 — □ 

6. CASSELS' FORMULA 

We make the following definition. 
Definition 6.1. 

Ei = {p : c p (E) = £cp(E')} and E 2 = {p : c p (E') = £c p (E)} . 

Then S = EiUE 2 U{£}. Note that by the discussion in Sectional EiUE 2 is exactly 
the set of primes where E (or equivalently, E') has split multiplicative reduction. 
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Cassels [5] has established a formula relating the sizes of Sel^Q,^') and 
Se\ w (Q,E). It reads as follows. 

#Sel w (Q,£) = #E(Q)[4>] n(E') yr c q (E') 
#SelW\Q,E>) *E'{Q)W] Vl{E) 11 c q {E) 

If E(Q)[4>] = 0, then the right hand side is (by Lemma 13.41 and Definition 16. 1[) 
^#s 2 -#s 1 -t«_ otherwise it is £#£2-#£ 1+ i-™ . (Note that £'(Q)[0'] = according 
to our convention, since the nontrivial points in this kernel are not real.) In terms 
of F^-dimensions, this says the following. 

Lemma 6.2. 

dim Sel w) (Q,E) + #Zi+w = dim Sel W ' } (Q, E') + #E 2 + dim E(Q) [</>] . 
We can combine the information from both Selmer groups in the following way. 
Lemma 6.3. Let r denote the rank of E(JQ) (and E'(Q)). Then we have 

r + dim H[(Q, E) [I] < r + dim IH(Q, E') [<j)'} + dim HI(Q, E) [</>] 

= dim Sel (0,) (Q, E 1 ) + dim Sel (0) (Q, E) - dim^(Q) [</>] 

= 2 dim Sel ( * #) (Q, E') - #Ei + #S 2 - w 

= 2(dimSel (0) (Q,i;) - dim£(Q)[$) + #Ei - #E 2 + w . 

T7ie same bound holds for dimIII((Q), In particular, we get an upper bound 

for dim III (Q, and dimffl((Q), «/ we fcriow t/ie rank r and the size of one 

of the two Selmer groups. 



Proof. Note first that we have E(Q)[4>] = E(Q)[£\. The inclusion 'c' is trivial. For 
the reverse inclusion, let P be a rational ^-torsion point on E. Then <fc(P) is in 
E'[<f>'] n E'(R) = 0, so P e E(Q)[<j)}. 
We have the exact sequences 



V^T" ->SelW(Q.E')- -, IIJ( 0, £')[,/] ,M 



— > — > Sci (0) (Q,i;) — >• ni(Q,^)[0] — ► o 



= £"(O)U' — 



o — ► m(Q,£?)M — ► m(Q,£?)M — ► m(Q,^)[^ 



and we know that 



dim B(Q) = r + dim £(Q) [£] = r + dim £(Q) [0] 
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From this, wc can deduce that 

r + dim III (Q, E)[l] < r + dim ffl(Q, £')[</>'] + dim IH(Q, E)[4>] 




+ dim LU(Q, E') [<f/] + dim LH(Q, E) [</>] 
= dim Sel (0,) (Q, E') + dim Scl W) (Q, E) - dim E(Q) [<£] 
= 2 dim Sel ^ (Q, E') - #Ei + #£ 2 - w 
= 2 dim Sel w) (Q, + #Si - #£ 2 + to - 2 dim £(Q) [0] . 



For the last two equalities, we use Lemma [6721 

To get the bound for dimLU(Q, E')[£], we use the exact sequence 



0—>m.(Q,E , )[<f/]—>m(Q,E')[£\—>jn.(Q,E)[il>]. 



□ 



Remark 6.4. 



(1) If UI(Q,E) (or equivalently, IH(Q, #')) is finite, then the sum of the di- 
mensions of UI(Q, E')[(j>'] and UI(Q, E)[<f)} is even, and it follows that the 
rank r has the same parity as #£i + + w. 

(2) Recall that Ei U S2 is the set of primes of split multiplicative reduction. By 
p~3l Theorem 5] the root number e(E/Q) for E is given in terms of local 
Artin symbols and the local root number at I: 



Since the parity conjecture is known for Selmer groups |12[ Theorem 1.4] 
and we are assuming HI(Q, E) is finite, the observation made in ((l) above 
implies that (-l)# s i+# s 2+"> = e(E/Q). Combining this with the product 
formula for the Artin symbol and the fact that the Artin symbol is trivial 
for primes p 7^ £ of semistable reduction (see |13j again) and at infinity 
according to our normalization, this gives us a formula for the local root 
number at £: 



Note that since this expression only involves local data, it will be valid 
whenever E has an i?-isogeny defined over Q(. 



We apply Lemma 13.21 to obtain the following expressions for the Selmer groups. 

Theorem 7.1. Let (f> : E — » E' be an isogeny of prime degree £ > 3 of elliptic 
curves over Q, with dual isogeny <f>' : E' — > E, and assume that E[cj>] C E(M). Let 
K and K' be the splitting fields of E[<fi] and E'[<p'], respectively, and define Si, £2 
and w as in Definitions \6.1\ and \3.3\ above. 



If £ \ ce(E)c e (E'), w = 1 and E(Q t )[<f>] = 0, then let Si = Si U {£}, else let 

51 = Ei- 

If £ \ ct{E)ci{E'), w = and E'(Q e )[c/)'} = 0, then let S 2 = E 2 U {£}, else let 

52 = S2. 



e(E/Qt) J] (-l,Qp(P)/Q P ) ■ 



additive 



e(E/Q e ) = {-l^i-lMPyQt) ■ 



7. The main result 
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Let 

a:K(Si,£) (1) -^K(S 2 ,£)* and p : K , (S 2 ,£) {1) K'(Si,t)* 

be the canonical maps. 

Then Se\ {,p '\Q,E') = ker a unless £ \ c e (E)c e (E'), w = and E'(Qt)[(j)'] ^ 0, 
and Sel W (Q,E) = ker^ unless £ \ c e (E)c t (E'), w = 1 and E(Qi)[<j>] ^ 0. 

In the two excluded cases, we still have inclusions Sel (0,) (Q, E') C ker a and 
Sel (0) (Q, E) C ker (3, respectively. 

We see that in each case, we obtain an explicit description for at least one of the 
two Selmer groups, which we can therefore determine fairly easily. We repeat the 
observation that this is sufficient to obtain a bound on the ^-torsion in III, compare 
Lemma 16.31 

Proof. We observe that in all relevant cases, the sets Si and S 2 correspond to those 
defined in Lemma \3. 2 1 For primes p ^ f, this follows from Lemma \A. 11 which also 
covers the case p = £ when £ | ci(E)cg{E') . The remaining cases for p — £ are dealt 
with in Lemmas 13.51 and 15.11 In the cases where we do not claim equality, we fail 
to take into account the local condition at £ (which is of codimension 1 in Ui = Hi 
or U' g = H' g ). □ 

This provides some easy bounds on the Selmer groups. To make this more 
precise, we observe the following. We denote the class number of a number field K 
by h K - 

Lemma 7.2. Let K/Q be a Galois extension with Galois group a subgroup ofF^. 
Let S be a finite set of primes, and denote by S' C S the subset of primes that are 
totally split in K. If £\ hK, then 

dim ¥e K(S,£) {1} = #5' + l 

if K is totally real but K ^ Q, or K = Q(pe) with the standard action on /ig, and 

dim ¥e K(S,£) {1) = #S" 

otherwise. 

Proof. The case K = Q is clear. In general there is an exact sequence 

— ► U s /U e s — > K(S,£) — > C\ S (K)[£] — > 

where Us is the group of S- units of K and Cls(if) is the S'-class group. The 
assumption £ \ hK implies that Cls(iT)[£] = 0. By the Dirichlet unit theorem, the 
group Us has torsion- free rank #<Sr- + — 1, where Sk is the set of places 

of K above primes in S and T,k is the set of infinite places of K . Let G C ¥f be 
the (cyclic) Galois group of K/Q. The representation of G on the Q- vector space 
Us <8>z Q must involve all characters of G of fixed order n \ #G with the same 
multiplicity m n . Let K n be the subfield of K of degree n. Then 

^ m k tp{k) = #S Kn + #T, Kn - 1 

k\n 

for all n \ #G. We then have dim K (S, l)^> = m #G (plus 1 if ^ C K with the 
standard action). We solve this system of equations. Note that the right hand side 



12 



ROBERT L. MILLER AND MICHAEL STOLL 



can be written as a sum 

(7-1) -1 + #Sa-„ +X)#M*„. 

pes 

Since the left hand side is linear in the irik, the solution is obtained as a sum of 
solutions corresponding to the individual summands in (|7.1|) . Let d p be the index of 
the decomposition group of p inside G. Then we have #{p\K n — gcd(n, d p ), and the 
solution for this right hand side is given by mk = 1 if k \ d p and = otherwise. 
An analogous statement holds for the contribution of £_k„ , with doo the index of 
the subgroup generated by complex conjugation. The first summand —1 in (|7.1|) 
contributes mi = — 1 and mk — for k > 1. In total, we see that to#g counts the 
number of places in S U {oo} such that the decomposition group is trivial, which 
means that they split completely in K. This gives the result when K ^ QifJ-t), 
since then the S-unit group has no ^-torsion. For K = Q(/.ig), we get an additional 
dimension from /j,£ when acts on it in the standard way. □ 

This applies to our situation in the following way. 

Corollary 7.3. In the situation of Theorem \7.1\ the following assertions hold. 

(1) If £ \ hx, then we have 

dimK{S u £) {1) = #53i + 1 - dimS(Q)[0] , 
and therefore (writing W.[t] for either HI(Q, E)[£] or LU(Q, E')[£]) 
r + dimffl[£] < #Ei + #S 2 + 2(1 - dim E(Q) [</>}) - w . 

(2) If t\hjc, then we have 

dimK'(S 2 ,£) w = #£ 2 + dim£(Q)[0], 
and therefore (writing UI[£] for either LU(Q, E)[£] or UI(Q,E')[£]) 
r + dimUl[£] < #Si + #S 2 +w. 

Proof. 

(1) First note that for all p £ Ei, p is totally split in K (since by the discussion 
in Section H we have E(Q p )[<f>] ^ 0). If S t ^ E x , then ^(Q«)[«/>] = 0, and 
so the additional element £ of Si docs not split completely. In the notation 
of Lemma T7.21 we thus have S[ = £i. Also, K is totally real. The claim 
on the dimension of K(Si, £)^ follows. By Theorem 17. 1[ we have 

Sel^'^Q,^') C kera C K{S U £) {1} , 

so dimSel (0,) ((Q),i;') < #Ei + 1 - dim £'(Q) [</>]. Lemma IQl now gives the 
estimate on r + dim LU[^]. 

(2) In the same way as in part (1), we find that S' 2 = £2. Now K' is not 
totally real, so Lemma 17.21 gives the dimension of K'(S 2 ,£) {1) as stated. 
The estimate then follows using Lemma \6. 31 as in part (1). □ 

Example 7.4. Let £ > 11 be a prime, and let <f> : E — > E' be an ^-isogeny of elliptic 
curves of conductor £ 2 (such that E[4>] C E(M.) as usual). By work of Mazur [21] we 
have £ < 163, and we find that in fact this applies to exactly the following curves E 
(with^= 11,19,43,67,163): 

121a2, 121bl, 121c2, 361al, 1849al, 4489al and 26569al . 
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(We use the labeling of the Cremona database [7].) 

By [34] Proposition VII.4.1], the points in E[tp] and E'\<f>'\ are defined over an 
abelian extension of Q of degree dividing £ — 1 and only ramified at I. By the 
Kronecker- Weber theorem [26j Theorem V.1.10], all such number fields are con- 
tained in Q(p e ). The field K = Q(P) for any P G E[<f>] \ {0} is totally real, hence 
contained in the maximal totally real subfield Q(/i^) + of Q(pi). By [3], for example, 
it is known that I does not divide the class number of Q(/.ie) + . Since [Q(fie) + : K] 
divides £ — 1 and hence is coprime to £, this implies that £ \ Hk- If £ is a regular 
prime, i.e., £ ^ 67, then I \ Hk' as well. 

Since K is totally ramified at £, we have that [Qi(P) : Qe] = [K : Q]. Again by 
work of Mazur, E has no rational ^-torsion, implying that K ^ Q. This implies 
P i E(Qe), so E(Qe)[4>] = 0. In the same way, we see that E'{Qt)[(j/] = 0. 

Since E has additive reduction at £ and good reduction everywhere else, we find 
Ei = £2 = 0. If I = 67, we verify that w = 1. Corollary 17.31 now shows that 

r + dim K ,ni(Q,E)[£] <io. 

We then verify that the rank is equal to w, and we see that 

m(®,E)[e\ = m(®,E')[e\ = o. 

Example 7.5. Consider E = 294al with 7-isogenous curve E' = 294a2. We find 
Si = 0, £ 2 = {2}, w = 1, and the rank r = 0. We have K = Q(^7) + (the maximal 
real subfield of Q(fir)) and K' = Q(V— 7). Note that Corollary 17.31 gives a bound 
of 2 for the dimension of LU(Q, E)[7]. So we need to look more carefully to prove 
that there is no 7-torsion in U1(Q,E). According to Theorem 17. 1[ 

Se\ w (Q,E) =ker( ( 8 : K'({2}, 7) (1) -> K'({7}, 7)*) . 

The group K'({2}, 7) is generated by (the classes of) 1 + \J~^7 and 1 — *J— 7; the two 
are swapped by the nontrivial automorphism. Therefore if' ({2}, 7)'^ is generated 
by their quotient. We check that jj^Ef i s n °t a seventh power in Q7 This 
implies that f3 is injective, hence Sel^(Q, E) — 0. Lemma [6731 then gives the bound 
dimni(Q,£)[7] <0 + 0- l + l = 0. 

8. When there is rational ^-torsion 

For the sake of completeness, we now consider the case that E(Q)[(f>] 7^ 0. From 
Theorem 17.11 and Lemma l6.2| we obtain the following, which essentially reproduces 
Theorem 1 of Tom Fisher's thesis [T5] (note that i = 5 or 7 if E(Q)[<j>] ^ 0). 
Our version has the slight advantage that it expresses the relevant data directly 
in terms of the curves in question, whereas Fisher uses the parameter A € X\(£) 
corresponding to a generator of E[4>]. 

Corollary 8.1. Assume that we have a nontrivial point P in E(Q)[(/)]. Let Si = Si, 
and set S2 = S 2 if w = 1 or i G Si , ^2 = S 2 U {£} otherwise. Let 

a:Q(S 1 ,£)^Q(S 2 ,ey 

be the canonical map. Then Sel (0,) (Q , E') — kera, and 

r + dim F< UI(Q, E) [£] < 2 dim F , ker a - #S : + #S 2 - w < #Si + #S 2 - w . 
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Proof. The result on the Selmer group follows from Theorem 17.11 (Note that 
E(Q)[4>] ^ implies E(Qi)[4>] ^ and therefore E'(Q e )[<j)'] = 0. Recall that 
for p 6 ^2, we have E[cj>] = fi£ as (Q p -Galois modules. Since in the present sit- 
uation E[4>\ consists of rational points, this is only possible if p = 1 mod I. In 
particular, I £ S2.) The general bound of Lemma [6.31 and the trivial fact that 
dimQ(5, £) = #S then give the estimates. □ 

Note that for p 6 S2 (which implies that p = 1 mod £), 

z p x /(z p x /~mf p )-z/«, 

where the first isomorphism is given by x i— > mod p. The second isomor- 

phism depends on the choice of a generator of ^(F p ). Note also that 

z* /(z*y z/« 

via x h-> (.t £_1 — mod £. 

The following examples can also be found in Tables 3 and 4 in the appendix 
of [15] . They are given here to illustrate the simplicity of the computations. 

Example 8.2. Consider curve E = 50bl, with 5-isogenous curve 50b3. Note that 
E(Q)[5] ^ 0. We have Si = {2}, £ 2 = 0, and w = 1. By Corollary EU we have 
dimSel (0,) (Q,£;') = 1. The rank is zero, so we find the bound 

dimLU(Q,50bl)[5] <2-l + 0-l=0. 

Example 8.3. For curve E — 174bl, which is 7-isogenous to 174b2, we have 
E(Q)[7] ^ and find Si = {2,3}, E 2 = {29}; also w = 1. The group ^7^29) is 
generated by 16; we have 

16° = 1, 16 1 = 16, 16 2 = 24, 16 3 = 7, 16 4 = 25, 16 5 = 23, 16 6 = 20 . 

If we identify Z 2 < 9 /(Z 2 < 9 ) 7 = ^(¥29) with Z/7Z by sending 16 to 1, then 2 is mapped 
to 1, and 3 is mapped to 5. So a is surjective and dimkera = 1. Wc obtain the 
bound (the rank is again zero) 

dimLH(Q,174bl)[7] <2-2 + l-l = 0. 

Example 8.4. We now consider E = 294b2 with E(Q)[7] 7^ and 7-isogenous 
curve 294bl. Wc find Si = {2, 3}, S 2 = 0, and w = 0. By Corollary EU we have 

Sel (0,) (Q, E') = ker(Q({2, 3}, 7) -> Z x /(Z x ) 7 = Z/7Z) . 

The map is given by a H> (a 6 — l)/7 (mod 7). Since both 2 and 3 have nontrivial 
image, we have dimSel^ '(Q, E') — 1, and (the rank is zero) 

dimLU(Q,294b2)[7] < 2-2 + 0-0 = 0. 

9. Application to the Birch and Swinnerton-Dyer Conjecture 

This work was motivated by a long-running project led by William Stein (and 
in whose inception the second author of this paper was involved) aiming at veri- 
fying the Birch and Swinnerton-Dyer conjecture completely for all elliptic curves 
of analytic rank or 1 and of moderate conductor. The conjecture states that the 
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analytic rank of an elliptic curve E/Q (which is the order of vanishing of the L- 
series L(E, s) at s = 1) equals the Mordell-Weil rank r of E, and that the following 
formula for the leading term in the Taylor expansion at s = 1 holds: 



1 n(E)Rcg(E)i\ p c p (E)#Ul(®,E) 

~ L ^ = ^2 



Jtors ) 

Here £l(E) is the real period of E, Keg(E) is the regulator of the height pairing 
on E(Q), c p {E) are the Tamagawa numbers, and £'(Q)tors is the torsion subgroup 
of E(Q). We call 

#ni(Q,£) an = • orF !r ( ^n )2 ^ 

r\ Sl(E)Reg{E)H p c p {E) 

the analytic order ofUI(Q,E). Then, assuming the rank conjecture 

ord s= i L(E, s) = r, 

the second part of the conjecture asserts that #ffl(Q, E) — #=IH(Q, E)^. 

Recall that Kolyvagin's work [20] proves that if E is a modular elliptic curve 
over Q and if the analytic rank of E is or 1, then the analytic rank equals the 
algebraic rank, IH((Q),i?) is finite, and its order is bounded above at all but a 
finite number of primes by an explicitly computable quantity. By [38] and [2] , the 
modularity hypothesis may be removed from these results. It is also known that 
#IH(Q, E) an is a rational number in this case. For such curves E and arbitrary 
primes £, it then makes sense to define 

BSD(E,£) ^ ord^#in(Q )J B)=ord^#in(Q, J K) an . 

The full BSD conjecture for E is then equivalent to BSD(_E,£) for all primes £. 

The work in |22j , which makes use of various previous results by a number of peo- 
ple (see [22] for references), combines Kolyvagin's result with explicit calculations 
involving Heegner points, Iwasawa theory and explicit descents to show that for 
such curves of conductor less than 5000, if the mod-£ Galois representation coming 
from E is irreducible, then BSD(£',^) holds. 

In the reducible case there is an ^-isogeny E — > £", and we have the following 
result. 

Theorem 9.1. Let £ be a prime (not necessarily > 5), let <fi : E — > E' be an isogeny 
of degree £ of elliptic curves over Q, and assume that the analytic rank of E is 
or 1 and the conductor of E is less than 5000. If the £ -primary parts of UI(Q, E) 
and m(Q,_E') are predicted by the Birch and Swinnerton-Dyer conjecture to be 
trivial, then they are indeed trivial, and so HSD(E,£) holds. 

Proof. General results collected in [35] , together with results of [THl [TB] show that 
the claim holds for all but nineteen isogeny classes containing a curve E such that 
E has analytic rank or 1 and such that there is an ^-isogeny E — » E' . For eight of 
the remaining classes, the predicted order of both Shafarevich-Tate groups is trivial 
at £. They are represented by the following pairs (E,£) with E[<fi] C E(R): 

(121bl, 11), (361al,19), (441dl,7), (784hl,7), (1849al,43), 

(3025al, 11), (3136rl,7), and (4489al,67). 

For the other eleven cases, more is needed than the techniques discussed here, see 
the discussion below. 
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Four of the eight cases above can be found in Example \7A\ which shows that 
III(Q, E)[£] and IH(Q, E') [£] are trivial in each case. This leaves the four pairs 
(441dl, 7), (784hl, 7), (3025al, 11) and (3136rl, 7). For all four curves we have that 
Si = £2 = and w = 1. One can verify that I \ hx and r = 1 in each case and so 
by Corollary^ we find that LU(Q, E)[£] = LU(Q, E')[£] = 0. □ 

The remaining cases where the analytic rank of E is at most 1 and the conductor 
is at most 5000 are 

E e {57011, 870il, 1050ol, 1938jl, 1950yl, 2370ml, 2550bel, 3270hl} 

for £ = 5 and E £ {546fl, 858kl, 1230kl} for 1 = 1. In these cases the Birch and 
Swinnerton-Dyer conjecture implies that 

LU(Q, E)(£) = but LH(Q, E'){£) = (Z/£Z) 2 . 

In this situation an ^-isogeny descent shows that IH(Q, E')[£] = (Z/£Z) 2 , as found 
in [15] or using the above methods. However this shows neither that 

UI(Q,E)[£] = nor that LU(Q, E') (£) = UI(Q,E')[£] . 

These cases require a second descent over </>' : E' —> E, a full ^-descent on E, or 
at the very least one must show that the elements of order I in III(Q, E') are not 
divisible by I. In a forthcoming paper of the first author with Brendan Creutz |10) . 
these remaining cases are dealt with using a second descent over 0'. 
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